Skip to content
OpenAdvisories

Archive

3 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /3 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-85458

    Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

    Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.

    Xpdf Xpdf ipe xpdf Ubuntu
  • Low 3.1
    CVE-2026-85052

    Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromi…

    Google Chrome chromium Browsers Debian
  • Low 3.5
    CVE-2026-85207

    itsourcecode Online Medicine Delivery System index.php cross site scripting

    A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched rem…

    itsourcecode Online Medicine Delivery System
  • Low 3.1
    CVE-2026-49456

    Waku: Open Redirect via `unstable_redirect` Helper

    Waku is the minimal React framework. Prior to version 1.0.0-beta.1, the unstable_redirect() helper exported from waku/router/server (packages/waku/src/router/define-router.tsx:156–161) accepts an arbitrary string and reflects it unchanged into the HTTP Locati…

    wakujs waku waku npm
  • Low 3.7
    CVE-2026-84969

    Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output

    A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who …

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu Alpine
  • Low 3.7
    CVE-2026-85030

    HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error

    A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routes_agent.py of the component selfRegister API Endpoint. Such manipulation of the argum…

    HKUDS AI-Trader
  • Low 3.5
    CVE-2026-85022

    langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

    A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/(shareLayout)/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of…

    langgenius dify